This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please see the following link for instructions on filing security bugs:
http://www.chromium.org/Home/chromium-security/reporting-security-bugs


VULNERABILITY DETAILS
Using Chrome I am able to bypass gmail log in information if the previous gmail user was not logged out or had not closed the program prior to shutting down the computer. Chrome is set to not remember a password for gmail. Please note that this only works when using the steps described below. If any of the steps take more than a few seconds, it will not work and will prompt for log in info.
- Step one: with gmail open in Chrome, shut down computer without logging out or closing Chrome.
- Step two: start computer
- Step three: immediately click on chrome icon in taskbar
- Step four: immediately type in gmail in url bar before chrome has fully loaded icons on page
- This will pull log me into the previous gmail session without entering in any log in info.

VERSION
Chrome Version: Version 50.0.2661.102 m
Operating System: Windows 10 Pro Version 1511 OS Build 10586.318

REPRODUCTION CASE
Please include a demonstration of the security bug, such as an attached
HTML or binary file that reproduces the bug when loaded in Chrome. PLEASE
make the file as small as possible and remove any content not required to
demonstrate the bug.

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: [tab, browser, etc.]
Crash State: [see link above: stack trace, registers, exception record]
Client ID (if relevant): [see link above]